Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa
File: 9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa (raw, json)
Hash identifier: fh6faKVGMtDql6WGIX6x2b8g7z4qkIWSAkQ9njZu4os=
Subject key identifier: 5B:B6:A3:91:C3:62:17:8F:AA:AC:07:57:22:A2:4C:FF:0C:23:AC:10
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 1DE45832634EC38BE0A75FA617A8D24D69CA67F3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa
Signing time: Fri 11 Jul 2025 20:01:23 +0000
ROA not before: Fri 11 Jul 2025 20:01:23 +0000
ROA not after: Fri 15 Aug 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07b:a080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e4:58:32:63:4e:c3:8b:e0:a7:5f:a6:17:a8:d2:4d:69:ca:67:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jul 11 20:01:23 2025 GMT
Not After : Aug 15 23:59:59 2025 GMT
Subject: serialNumber=ba7bd41eb3b576907abd78e692675102f3809b9abad44dad0a3f55d2d840ee46, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:4a:4a:78:ab:9c:78:75:e3:0d:08:79:eb:
40:07:eb:21:56:20:f6:a8:39:8b:ba:ce:08:49:21:
07:20:08:12:24:28:77:d7:7e:45:c0:55:91:41:04:
11:ad:4e:7f:d3:01:9c:17:5c:1b:60:06:90:a8:32:
ae:34:12:b2:b1:42:ae:13:23:1c:cb:fa:b2:ae:a1:
16:a7:59:3c:83:6e:e6:fb:d3:06:35:b0:79:d5:8f:
b6:de:a9:45:be:ab:dd:12:ec:23:80:df:00:1f:9a:
41:76:55:ec:b7:e2:a1:b7:7f:b3:29:1a:2a:3a:36:
c7:92:7e:4b:46:68:2e:cf:ec:f4:7f:55:43:20:30:
f5:be:6a:f7:98:f8:f6:78:7d:5b:b8:f2:4a:4f:3c:
62:6c:13:33:b9:2c:1e:a8:1f:81:94:13:41:22:be:
c1:95:c5:0e:a1:26:77:da:32:07:14:81:2f:8e:3e:
b8:14:bb:40:e4:ce:ee:a4:18:74:1b:ce:10:f7:64:
48:4b:6b:36:ce:d4:52:a7:ac:79:09:6b:22:f4:6d:
0b:64:8a:0e:80:8f:2f:5f:4a:4e:ee:86:a8:8e:1e:
9a:0a:39:11:f7:97:74:fb:42:aa:36:2c:16:a1:d7:
29:55:b1:52:a1:12:71:44:db:03:d8:d6:04:94:b1:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B6:A3:91:C3:62:17:8F:AA:AC:07:57:22:A2:4C:FF:0C:23:AC:10
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d0a7774-67d7-4664-ac0f-4e214b75f1c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07b:a080::/46
Signature Algorithm: sha256WithRSAEncryption
21:1d:9a:15:ca:8e:fe:3d:a1:8d:a1:1b:91:f7:c5:55:0c:44:
73:10:78:75:35:60:cc:79:e5:31:0e:ac:86:16:fd:ca:d8:44:
6a:1a:78:61:a0:79:f4:03:23:74:63:2e:d2:ba:7f:0c:03:61:
b3:a2:39:46:a4:2d:64:05:89:f0:65:38:dc:b4:af:49:61:44:
89:6c:cc:63:2d:6a:18:48:97:10:9e:4f:ee:4a:36:12:16:e5:
a3:fc:7c:d8:5a:31:66:5a:17:15:82:cd:d5:43:3c:b4:9c:db:
6c:8f:7a:3d:11:c7:ee:c0:8f:37:92:58:ba:d4:b9:25:cd:28:
e8:06:78:12:92:f3:cd:79:3f:6e:30:0a:f9:dd:72:42:47:e8:
69:1e:4c:7c:ec:62:11:e8:01:88:b1:d9:5b:d9:4c:46:bd:65:
fd:06:a4:f1:ab:65:a7:86:13:ce:43:c3:5d:98:55:36:4f:0d:
0a:0a:42:95:05:e9:d0:e4:9c:46:65:fb:ba:57:e8:73:70:9e:
8a:f3:55:1c:61:a6:a8:2d:fa:75:38:fd:83:69:4f:12:37:72:
40:c5:8c:d0:77:8a:1a:13:3e:4c:f9:73:7b:4f:6a:0e:cc:56:
7b:52:09:46:5e:4a:37:a2:24:f0:96:85:87:2d:9f:ad:39:fe:
d8:f6:37:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:43:14 2025 by rpki-client